Hackers breached Suno, leaked source code and customer data | Ukraine news - #Mezha

A breach reportedly exposed Suno’s internal code and evidence of mass audio scraping, raising fresh questions copyright and AI training practices.

As informed by Techcrunch

According to 404 Media, the Suno AI-powered music generator was hacked. The hacker told the publication that they used a supply-chain attack to obtain credentials of an employee, which allowed access to the source code that allegedly shows how Suno collected decades of audio material from YouTube Music, Deezer, Genius, stock music libraries, and podcast RSS feeds.

Suno’s competitor, Udio, is also accused of data gathering from YouTube. Google, YouTube’s parent company, faces similar copyright infringement claims from various major publishers.

The hacker, according to reports, gained access to customer data, including email addresses, phone numbers, and partial credit card data in Stripe.

Suno did not notify customers the breach in November 2025 and says it was a limited security incident that was quickly brought under control.

A limited security incident that was quickly contained.

The breach encompassed access to source code and, according to sources, confirmed suspicions the use of publicly available audio material to train the model. The industry is talking the need for a clearer interpretation of legislative norms in the context of training artificial intelligence on music material and for detailing the principles of fair use.

Labels that filed lawsuits against Suno remain convinced that the cited practices infringe copyrights and platform terms of use. The implications for other industry players are also discussed, notably for Suno’s competitors such as Udio, and for large tech firms whose activities are tied to YouTube and other music streaming services.

Experts emphasize that such cases may prompt a review of data-use rules in AI training and calls for transparency the sources of audio material. Debates are expected regarding platform accountability for copyright infringement and potential changes to data collection and usage policies.

In particular, the Suno and Udio cases highlight the need for greater caution by developers of music algorithms and more active engagement with rights holders. Regulators and industry participants continue to analyze the impact of such practices on the future training of AI models and on user trust in these services.

Against these developments, the industry is considering strengthening security and data-tracking mechanisms, as well as clarifying the terms of content use during AI training to avoid similar incidents in the future. The outcomes of the review could shape Suno’s and other market participants’ steps toward more responsible use of audio materials.

More interesting materials: